QANDRYX Security

Privacy Policy

Last updated: September 2026

Protecting your personal data matters to us. This policy informs you, in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), about which data is processed when you visit this website. In short: very little. This website sets no cookies, uses no analytics and loads no third-party content. The German version is authoritative.

1. Controller

QANDRYX Security GmbH Wehleweg 6/30, 1030 Vienna, Austria E-mail: support [at] autophish.io

No data protection officer has been appointed, as the legal requirements for doing so are not met.

2. Hosting and server log files

This website is hosted by world4you Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria.

When you access the website your browser, for technical reasons, transmits data to the web server that is stored in server log files:

  • IP address of the requesting device
  • date and time of access
  • requested page or file and amount of data transferred
  • referrer URL (the previously visited page), if transmitted by the browser
  • browser type and version, operating system

Processing takes place to provide the website, to ensure operational security and to defend against attacks. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Log files are deleted after 90 days.

3. Contact

The contact form on this website does not transmit any data to our server. On submission your browser merely composes a prepared e-mail from your input and opens your own e-mail client. Whether and when you send that e-mail is up to you. Transmission takes place via your e-mail provider.

If you contact us by e-mail we process the data you provide (name, e-mail address, company where given, and the content of your message) to handle your inquiry and follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). We delete the data once it is no longer required for that purpose and no statutory retention obligations apply.

E-mail is currently received via the AutoPhish infrastructure.

4. Cookies and local storage

This website sets no cookies.

If you explicitly choose a language via the language switcher, your browser stores that choice (value de or en) in its local storage. This storage is strictly necessary for the function you requested (§ 165(3) Austrian Telecommunications Act 2021) and requires no consent. The value is read only when the start page is opened without a language in the URL and is never transmitted to us. You can delete it at any time via your browser settings.

5. No analytics, no third parties

We use no web analytics, no tracking and no advertising networks. Fonts are served from our own server, not from Google or other providers. No third-party content is embedded.

This website links to external services, in particular autophish.io as well as LinkedIn and GitHub. When following these links the privacy policy of the respective provider applies. For AutoPhish see autophish.io/privacy.

7. Recipients and third-country transfers

The recipient of the data listed under point 2 is our host as a processor. This website does not transfer data to countries outside the EU or EEA.

8. Your rights

You have the following rights regarding your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object to processing based on legitimate interests (Art. 21 GDPR)

An e-mail to the address above is sufficient to exercise these rights.

If you believe that the processing of your data violates data protection law you may lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

9. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.